Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          49lQjioXNzSSgHrzgwFDW1YUUKr+JnNJqXQovObCJEM=
Subject key identifier:   AF:97:2C:5D:97:13:8F:92:4F:B3:F3:E1:18:E2:45:91:59:5B:E0:DC
Certificate issuer:       /CN=1609A1F6F144F5436BD99A38E640B310CB679304
Certificate serial:       4EB1A7CC440BBA0F44907D5B0C7B3431F32C2B10
Authority key identifier: 16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Sat 19 Oct 2024 00:11:06 +0000
ROA not before:           Sat 19 Oct 2024 00:06:06 +0000
ROA not after:            Sat 18 Oct 2025 00:11:06 +0000
asID:                     263283
IP address blocks:        2804:1658:100f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b1:a7:cc:44:0b:ba:0f:44:90:7d:5b:0c:7b:34:31:f3:2c:2b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609A1F6F144F5436BD99A38E640B310CB679304
        Validity
            Not Before: Oct 19 00:06:06 2024 GMT
            Not After : Oct 18 00:11:06 2025 GMT
        Subject: CN=AF972C5D97138F924FB3F3E118E24591595BE0DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:c1:7d:88:8f:d8:e2:83:23:77:fd:d4:8a:
                    c0:ff:43:67:96:15:ac:ea:ac:40:75:66:65:a3:75:
                    2f:6a:15:5d:7c:cd:50:95:a9:4c:4f:75:8d:e9:df:
                    48:b7:03:c0:0c:38:bf:9c:34:92:3e:ba:27:46:ed:
                    90:d7:80:d4:d1:b2:84:74:3a:86:99:05:fe:09:72:
                    7f:d6:07:a4:18:af:2f:85:33:76:7d:4b:ce:ba:c7:
                    29:56:63:be:7d:48:66:1e:ea:1b:0b:88:58:31:33:
                    49:91:42:74:5f:cf:04:e2:c0:45:cf:3c:fb:42:ad:
                    f6:6e:9c:88:63:29:87:1e:65:65:6c:26:0c:f4:2d:
                    01:4d:e2:22:7b:fe:53:4d:64:87:e9:96:ac:e9:d3:
                    ba:3e:8d:4f:2a:b5:9f:da:ac:94:b6:03:81:65:c6:
                    67:b6:0a:dd:29:b2:7b:9e:d7:9b:38:5b:63:a3:de:
                    83:ee:d1:43:84:08:12:d9:7a:93:8d:f0:8f:1a:f3:
                    3e:62:e5:c5:d1:cd:12:09:bc:86:34:f8:d2:55:fb:
                    d9:e9:2d:b4:78:b4:59:af:53:77:9b:ae:2b:9a:8c:
                    b5:16:ea:bf:fd:60:83:05:f3:02:a0:cc:4c:d3:2e:
                    ef:14:d3:27:4e:27:e8:6d:90:0d:35:ec:88:4e:4e:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:97:2C:5D:97:13:8F:92:4F:B3:F3:E1:18:E2:45:91:59:5B:E0:DC
            X509v3 Authority Key Identifier:
                keyid:16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/1609A1F6F144F5436BD99A38E640B310CB679304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030663a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:100f::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:14:a8:9b:1f:9b:9b:7c:32:d8:f0:8f:7c:a9:10:dd:fc:e5:
         e1:06:fd:01:02:c8:bd:f4:69:69:2f:b6:43:ee:49:66:d7:6f:
         d6:db:38:23:c5:5b:68:3f:8c:7f:d4:ae:6d:0a:7b:2d:34:1b:
         37:13:c1:b7:11:d5:a9:6b:c2:45:13:76:2b:47:4e:6e:ca:9c:
         27:be:64:ce:13:1d:41:83:65:44:07:31:08:73:ec:56:f9:20:
         bb:51:bb:f8:94:0e:11:5e:1a:08:c8:5c:b3:9d:c7:6b:54:9c:
         a0:51:47:74:d5:20:77:40:4d:3c:cb:fe:7c:f8:35:92:07:a2:
         a4:2f:90:2a:a4:5a:2e:6c:d8:ce:bb:80:27:96:6e:cc:2a:31:
         d1:79:bb:de:d0:27:7f:0d:1d:a5:a9:48:e2:76:7d:70:c9:bb:
         0e:c9:5d:7a:b7:88:3b:88:81:74:02:51:23:cb:61:9d:49:b2:
         51:b6:9b:3b:a8:70:24:d0:95:d7:55:4c:65:8f:b4:06:83:2f:
         f6:2b:2c:bf:dc:52:2c:be:e8:eb:79:38:52:03:8d:8e:d4:54:
         1b:84:02:da:17:1d:c2:0c:c9:85:1e:d8:32:9c:ca:7d:5a:f5:
         60:8a:38:14:d7:16:1d:2e:d6:0f:06:60:b5:34:e8:26:d7:81:
         6f:3d:f7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 18:01:04 2024 by rpki-client on console-fra.rpki-client.org